Arris

Arris produces a modestly sized line of residential and small-business networking appliances and firmware, including wireless access points and broadband routers such as the SBR series and VAP2500, that are widely distributed across consumer and ISP deployments. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and frequently acquire public exploit code, reflecting the appeal of internet-exposed home-networking devices for remote compromise and botnet recruitment. The exposure recurs across product lines through weakness classes centered on OS command injection, cross-site request forgery, cross-site scripting, and sensitive information disclosure—attack vectors endemic to web-managed embedded devices with limited input validation and session security. Defenders should inventory affected appliances, restrict management access from untrusted networks, and prioritize firmware updates for these widely distributed gateway devices. Current exploitation activity and severity counts are shown alongside this summary.